1) Local Groups
We have a DMZ SEPM server with no access to AD and the Security tema would like access. This means I have to set up 6-8 individual account with ReadOnly(RO) access, rather that 6-8 'generic' accounts to be added to a single Group with Permissions applied.
2) Ability to remove default "Send This Report to System Admins" check box for RO admins who create reports.
see attached SendThisReport.jpg
3) Prevent LimitedAccess Administrators from changing default Password Expires settings.
see attached PasswordExpires.jpg